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DETAILED ACTION 

1. This action is responsive to the communication filed on November 19, 
2003. Claims 1-18 are pending. At this time, claims 1-18 are rejected. 

Claim Rejections - 35 USC § 101 

2. 35 U.S.C. 101 reads as follows: 

Whoever invents or discovers any new and useful process, machine, manufacture, or composition of 
matter, or any new and useful improvement thereof , may obtain a patent therefor, subject to the 
conditions and requirements of this title. 

3. The claimed invention is directed to non-statutory subject matter, 
a. Referring to claim 1: 

i. This claim consists a method for calculating a message 
authentication function. The claim purely recites the mathematic calculation. Thus, it is 
an abstract idea, directed solely to non-functional descriptive material. Therefore, claim 
1 recites a non-statutory subject matter. Claims 2-8 have limitations that are similar to 
those of claim 1, thus they are rejected with the same rationale applied against claim 9 
above. 

Claim Rejections - 35 USC § 102 

4. The following is a quotation of the appropriate paragraphs of 35 
U.S.C. 102 that form the basis for the rejections under this section made in this Office 
action: 

A person shall be entitled to a patent unless - 

(b) the invention was patented or described in a printed publication in this or a foreign country or in public 
use or on sale in this country, more than one year prior to the date of application for patent in the United 
States. 

5. Claims 1-18 are rejected under 35 U.S.C. 102(e) as being anticipated by 
Ripley et al (US 2002/0087818 A1 ). 

a. Referring to claim 1: 

i. Ripley teaches a method, comprising: 

(1) calculating a first part of a message authentication 
function by a first processor (see Figure 4 and more details in paragraph 0055 of 
Ripley); 
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(2) calculating a second part of the message 
authentication function by a second processor (see Figure 4 and more details in 
paragraph 0056 of Ripley); and 

(3) combining the results of the first and second parts into 
the message authentication code by the first or second processors (see Figure 4 and 
more details in paragraph 0057 of Ripley). 

b. Referring to claim 2: 

i. Ripley further teaches: 

(1) wherein the message authentication function is used, 
in part, to authenticate data transmitted between the first processor and a third 
processor (see Figure 4 and more details in paragraph 0058 of Ripley). 

c. Referring to claim 3: 

i. Ripley further teaches: 

(1) wherein the first and second processors are provided 
in separate computer systems (see Figure 4 and more details in paragraph 0058 of 
Ripley). 

d. Referring to claim 4: 

i. Ripley further teaches: 

(1) wherein the first and second parts of the message 
authentication function consist of one-way hash functions (paragraph 0074 of Ripley). 

e. Referring to claim 5: 

i. Ripley further teaches: 

(1 ) wherein calculating the first part comprises calculating 
a value without having a data key associated with the function (paragraph 0075 of 
Ripley). 

f. Referring to claim 6: 

i. Ripley further teaches: 

(1) wherein calculating the second part comprises 
calculating a value for a data set without having contents of the data set (paragraph 
0075 of Ripley). 
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g. Referring to claim 7: 

i. Ripley further teaches: 

(1) storing the contents into a non-volatile memory 
coupled to the first processor and storing the message authentication code into non- 
volatile memory coupled to the second processor (paragraphs 0042 and 0044 of 
Ripley). 

h. Referring to claim 8: 

i. Ripley further teaches: 

(1) calculating a message authentication code using the 
message authentication function on a data set, wherein the message authentication 
code can be used to authenticate a record that consists of the data set (paragraphs 
0055-0058 of Ripley). 

i. Referring to claim 9: 

i. Ripley teaches a method implemented in a first computer, 

comprising: 

(1) creating a record (paragraphs 0029 and 0072 of 

Ripley); 

(2) computing a first part of a message authentication 
function using the contents of the record (see Figure 4 and more details in paragraph 
0055 of Ripley); 

(3) providing the result of the first part to a second 
computer (see Figure 4 and more details in paragraph 0056 of Ripley); and 

(4) receiving the result of a second part of the message 
authentication function from the second computer, said second part computed using a 
data key that is not available to the first computer (see Figure 4 and more details in 
paragraph 0057 of Ripley). 

j. Referring to claim 10: 

i. Ripley further teaches: 

(1) encrypting the record and transmitting the record to a 
third computer (paragraph 0059 of Ripley). 
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k. Referring to claim 11: 

i. This claim has limitations that is similar to those of claims 1 . 
and 9, thus it is rejected with the same rationale applied against claims 1 and 9 above. 
I. Referring to claim 1 2: 

i. This claim has limitations that is similar to those of claim 2, 
thus it is rejected with the same rationale applied against claim 2 above, 
m. Referring to claim 13: 

i. This claim has limitations that is similar to those of claim 1, 
thus it is rejected with the same rationale applied against claim 1 above, 
n. Referring to claim 14: 

i. This claim has limitations that is similar to those of claim 10, 
thus it is rejected with the same rationale applied against claim 10 above, 
o. Referring to claim 15: 

i. This claim has limitations that is similar to those of claim 9, 
thus it is rejected with the same rationale applied against claim 9 above, 
p. Referring to claim 16: 

i. This claim has limitations that is similar to those of claim 1, 
thus it is rejected with the same rationale applied against claim 1 above, 
q. Referring to claim 17: 

i. Ripley teaches a computer, comprising: 

(1 ) a processor (paragraph 0029 of Ripley); and 

(2) memory containing code executable by said 
processor (paragraph 0023 of Ripley); 

(3) wherein said executable code causes said processor 
to compute a first part of a message authentication function including contents of a 
record, providing the result of said first part to a second computer, receiving the result of 
a second part of the message authentication function from the second computer, and 
encoding the record with the result of the second par (paragraph 0059 of Ripley); and 
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(4) wherein the record contents are not revealed to the 
second computer and the second part is computed by the second computer using a 
data key that is not revealed to the first computer (paragraph 0075 of Ripley), 
r. Referring to claim 18: 

i. This claim has limitations that is similar to those of claim 9, 
thus it is rejected with the same rationale applied against claim 9 above. 

Conclusion 

6. The prior art made of record and not relied upon is considered pertinent to 
applicant's disclosure. 

a. Tomkow et al (US 2003/0172120 A1) discloses a first party (e.g. 
educational testing service) provides through the internet to a control server information 
(e.g. test server) relating to a second party (e.g. a student taking tests prepared by the 
service). The server provides and may store a verification (e.g. an encrypted digital 
signature) of, but does not store, the second party information. The server transmits the 
information and the verification through the internet to the second party. The second 
party transmits to the server through the internet the information and the verification with 
a request to transmit the information to a designated third party (e.g. a college or 
university to which the student has applied for admission). The server authenticates the 
information through verification comparisons (or through comparison of the information 
with the reconstruction and decryption of the verification) and transmits the information, 
authenticated by the server and the testing service, to the third party (see abstract). 

b. Mattox et al (US 2004/052377 A1) disclose an apparatus and a 
receiver, which is in a broadband communication system, includes the logic necessary 
for protecting keys used for encrypting content that is received by the receiver. The 
apparatus validates the keys and denies the receiver the use of the keys if they become 
invalid (see abstract). 

Any inquiry concerning this communication or earlier 
communications from the examiner should be directed to Thanhnga (Tanya) Truong 
whose telephone number is 571-272-3858. 
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If attempts to reach the examiner by telephone are unsuccessful, 
the examiner's supervisor, Kim Vu can be reached at 571-272-3859. The fax and 
phone numbers for the organization where this application or proceeding is assigned is 
571-273-8300. - 

Any inquiry of a general nature or relating to the status of this 
application or proceeding should be directed to the receptionist whose telephone 
number is 571-272-2100. 



TBT 

December 4, 2006 



